Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92e1c7b2-0d18-304e-be99-0acae6ddc96a.roa
File: 92e1c7b2-0d18-304e-be99-0acae6ddc96a.roa (raw, json)
Hash identifier: NPgSOWLK0AyqDZZESVhgcXf84c5eRdL8ICmZafD6x9A=
Subject key identifier: 2E:CC:FD:93:89:2D:DE:AF:B0:81:22:B5:3E:29:97:07:AB:06:96:EC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A6AD19925784BD40E2400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92e1c7b2-0d18-304e-be99-0acae6ddc96a.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 66.102.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6a:d1:99:25:78:4b:d4:0e:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=35af8516-e71e-4d50-b9b7-580025e78bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:cb:3b:44:50:6b:1f:37:27:97:21:f4:5a:
3c:17:f5:dd:72:4c:80:f1:ea:c9:b6:89:73:03:a2:
d9:aa:f8:85:01:6f:81:25:7d:00:42:df:74:5c:6a:
1f:b9:13:22:05:51:db:c8:32:1a:f1:cb:66:f0:d5:
81:25:58:bf:6e:87:a4:01:73:52:dd:28:f1:eb:5b:
93:a6:3f:bc:5e:ce:a1:2f:d5:8b:4d:f6:69:b1:f9:
06:7b:86:dc:d9:bb:44:a1:ef:b6:d7:96:24:d6:e0:
fd:a5:93:3b:4f:7f:0b:3d:0b:4b:59:d3:de:09:6b:
5d:46:64:32:f8:df:b1:d5:4f:bd:54:f3:f4:1d:8b:
36:cc:09:89:3b:5f:aa:e8:d6:f6:fd:f9:c8:46:dd:
88:63:6a:b5:cd:01:64:7b:33:81:de:31:db:0b:98:
cf:7b:15:89:07:2a:f8:4d:a1:ba:4c:52:29:99:b3:
15:1c:15:43:30:fe:7b:ba:81:5b:fb:4f:a7:2d:05:
42:9c:74:a1:55:33:5d:8c:ab:58:8c:ad:38:8a:80:
f2:c5:01:69:2e:8b:56:d8:34:d5:59:f2:df:29:21:
4b:43:8c:c3:ef:e7:8f:8a:52:d8:e9:5d:bb:27:96:
31:0d:03:03:05:b8:e7:ba:0a:7f:6c:18:30:a2:f1:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CC:FD:93:89:2D:DE:AF:B0:81:22:B5:3E:29:97:07:AB:06:96:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92e1c7b2-0d18-304e-be99-0acae6ddc96a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:f1:f2:03:b8:f2:c2:c3:a5:24:0b:ec:53:1b:93:e9:17:32:
1b:f3:5d:51:a0:53:65:b1:e0:20:89:41:6b:73:7b:ba:bf:95:
82:d7:94:0a:e8:4d:3e:8a:ab:35:e7:05:a1:b6:db:2c:fc:de:
d4:e9:fb:5d:9b:39:9a:1e:a6:ff:83:e2:7c:38:0b:fc:0b:68:
01:7b:ff:c6:59:6c:e3:f6:7a:fd:7f:1a:ed:c8:6f:ae:16:b4:
34:96:b6:3f:45:23:7a:ae:fe:d5:3a:72:15:ff:27:c5:37:e4:
00:92:90:b3:1a:97:12:4b:e0:fa:0d:42:08:1d:f7:66:bc:a9:
94:35:64:6f:4d:49:a1:dc:c1:16:b6:07:cf:3d:31:c8:64:32:
70:18:a6:a5:25:11:2b:7c:19:2f:2d:02:f9:74:92:69:30:16:
49:f5:87:c6:71:2c:f3:e2:ab:5b:29:49:00:02:32:8f:65:76:
5c:29:f5:a0:e7:55:91:3a:45:ad:ec:03:d1:f4:f8:1f:ed:46:
3c:47:64:97:ea:43:c5:70:de:2d:89:f7:07:60:0e:96:44:f3:
4c:74:1b:2a:b3:9a:13:28:87:67:6d:25:be:53:7e:c6:f4:ba:
56:5a:fa:61:2f:d8:50:50:38:7a:89:3b:83:25:cc:32:83:8c:
97:fd:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:57:54 2025 by rpki-client